passive DPDP security check

Find the gaps before a hacker, or the regulator, does.

India's DPDP Act makes every business protect customer data. See your website's security and privacy grade in 30 seconds. Free.

We use your email only to send your result, and tips only if you tick the box. You can ask us to delete it anytime. Privacy notice

Passive and safeResult in 30 secondsNo login neededInstant report + email copy
13 May 2027Most DPDP duties apply to businesses
up to ₹250 crorePenalty for weak security safeguards
72 hoursTo send the Board a detailed breach report
// what we check

Four layers of DPDP your website shows the world.

Most DPDP tools only sell documents. We test the security your customers' data actually depends on.

Rights and transparencyGrievance contact, rights to correct and erase, Board complaint route. s.8(9)-(10), s.11-14
Email securitySPF and DMARC stop fake invoices sent from your address. s.8(5)
Notice and consentPrivacy notice, DPDP wording, consent banner, trackers. s.5, s.6, Rule 3
Security safeguardsHTTPS, security headers, cookies, insecure forms, exposed versions. s.8(5), Rule 6

Three steps. Thirty seconds.

Enter your website

Confirm it's yours. We only read what any browser can already see.

Watch the live scan

Our scanner checks your site in real time while you watch.

Fix with confidence

Fix steps and DPDP mapping, or our engineers fix it for you.

// who it's for

Built for businesses that hold customer data

Clinics and labs

Patient records are among the most sensitive data you can hold.

Read the guide →

Schools and coaching

Children's data needs parental consent and extra care.

Read the guide →

CA and finance offices

PAN, Aadhaar and bank details make you a target.

Read the guide →

Online shops

Addresses, phones and order history for every customer.

Read the guide →
// pricing

Start free. Fix with confidence.

Free check
₹0
  • A–F grade for your website
  • Your top 3 issues
  • Result on screen + by email
Check my website
Report + Advanced AssessmentFounding price
₹1,499₹2,999
First 50 businesses · one-time
  • Every issue + fix steps + DPDP duty
  • Advanced Security Assessment (deep checks)
  • Formal PDF report, emailed to you
  • 3 re-scans in 30 days to prove fixes
  • Your own account and report history
  • Readiness checklist · breach plan · 7-day refund
Start with the free check
Done-for-you fixes
from ₹15,000
  • Our engineers fix the issues
  • Privacy notice and consent banner
  • Re-check and updated report
  • Optional full VAPT
Talk to an engineer

Monthly monitoring · ₹999/month Coming soon

We re-check your site every month and alert you when something breaks: certificate expiry, a removed protection, a new tracker.

Join the waitlist

Questions business owners ask

Is this legal advice?

No. The DPDP Security Check is a technical security and privacy assessment of your public website by security professionals. It shows gaps that relate to DPDP duties and how to fix them. For legal interpretation of your specific situation, speak to a lawyer.

Is the check safe for my website?

Yes. It only looks at what any visitor's browser can already see: your pages, headers, cookies, privacy notice and public DNS records. We never attack, log in to or overload your site.

Does the DPDP Act apply to small businesses?

Generally, yes. The Act applies to any business that handles digital personal data of people in India: customer names, phone numbers, emails, patient or student records. As of October 2026, the government has not notified any exemption for small businesses or startups. Even if one comes later, the duty to keep data secure and report breaches is expected to stay.

When do I need to be ready?

The DPDP Rules were notified in November 2025. Most duties for businesses, including security safeguards, breach reporting, notice and consent, apply from 13 May 2027.

What's in the full report?

Every issue we found, explained in plain language, the exact fix steps you can forward to your web developer, which DPDP duty each issue relates to, a readiness checklist for things a website scan can't see (staff access, backups, vendors), and a 72-hour breach response plan template.

What is the Advanced Security Assessment?

It comes with the full report. After you create your account and prove you own the domain (with a DNS record or a small file), we run deeper, safe checks: exposed configuration and backup files, open folders, risky server settings, CORS, outdated software with known flaws, DNS hardening and your public attack surface. You get a formal PDF report by email, plus 3 re-scans within 30 days to confirm your fixes. It is automated and read-only, not a manual penetration test.

Why do I have to prove I own the website?

Deeper checks should only run with the owner's permission. Verifying ownership protects you, and it makes sure nobody else can order a deep assessment of your website.

I'm not technical. Can you fix the issues for me?

Yes. The report is written so your developer can act on it, and if you don't have one, our team can fix the issues for you. See Services.

How do I pay?

Securely through Razorpay: UPI, cards, net banking or wallets. Your report unlocks on screen straight away, and we email you a private link to it so you can come back anytime.

What if the report doesn't help me?

Email us within 7 days of purchase and we'll refund you in full. See our refund policy.

Few months left. Start with one scan.

Free, passive and private. Your grade in 30 seconds.

Scan my website free